HIPAA audits conducted by the
government are expected to begin soon
HIPAA-covered entities (such as healthcare
providers and health plans) and their business
associates will soon face governmental audits
of their HIPAA compliance. According to
some sources, covered entities and business
associates may have just two weeks to
respond to the auditor’s request for
information. As a practical matter, it will be
impossible for a covered entity or business
associate to bring its “HIPAA compliance
house” in order within such a short period of
time. Furthermore, reports have indicated
that the Office for Civil Rights (OCR) of the
Department of Health and Human Services
might disregard documents created or
modified after receiving the information
request. Therefore, the time to prepare for a
HIPAA audit is now.